Error: rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
File:                     54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft (raw, json)
Hash identifier:          ts7MVLj82wsk1HLOBKe2IydTyrheTpbvTP6rWWFM5GE=
Subject key identifier:   9B:B2:E4:D1:ED:1D:31:90:3F:49:24:22:23:A1:4B:10:5C:DA:AD:08
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       1D69D0F731A6FFAC601414B9B06CE2AE7D32545E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
Manifest number:          0451
Signing time:             Sun 11 Oct 2026 08:35:13 +0000
Manifest this update:     Sun 11 Oct 2026 08:30:13 +0000
Manifest next update:     Mon 12 Oct 2026 09:29:13 +0000
Files and hashes:         1: 34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa (hash: iAg6BQ8+02suZ13TvkbSftIFdn5CHFxtrXnfSju+t7w=)
                          2: 34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa (hash: otaYD80AipTCatXsqgPzIw01Sj0yS2QXvqvQ/Lz/LV4=)
                          3: 34352e3233362e3235332e302f32342d3234203d3e20323638323532.roa (hash: s8kBdXiA8WDFJzv9MWilnbsivhax9CxNel21K26QJeE=)
                          4: 34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa (hash: J2PR9+qwwz1wPuDzC5XfcutNurjdw3sQSC/QNpljoDI=)
                          5: 34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa (hash: p4tD1PxBjbv73aRQ3aitf8BXNeik2cOaBMqC3WvDrf0=)
                          6: 34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa (hash: +NjPpPOTUWcaPd46eun4rmunjuHjWIoErAzcgbBFM0Q=)
                          7: 323830343a346534633a3a2f33322d3332203d3e20323638323532.roa (hash: 1ueOxg5gx5cXOrdcVlMrqkQFVQnRZbR/SupmdoO/WLI=)
                          8: 323830343a346534633a3a2f33332d3333203d3e20323638323532.roa (hash: Edx3/GtpUTbv8Fhc02CDq2pKUlgFhRXhgObPBxQOIA4=)
                          9: 34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa (hash: ZmacUlpxsj5PMburFdPJmkiGlnelA6RREDAeTP5akUU=)
                          10: 54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl (hash: 1ovyKaBfzRvstYqN31T8rupapzFj5sT/ibW5bTtK/2A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:d0:f7:31:a6:ff:ac:60:14:14:b9:b0:6c:e2:ae:7d:32:54:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Oct 11 08:30:13 2026 GMT
            Not After : Oct 12 09:29:13 2026 GMT
        Subject: CN=9BB2E4D1ED1D31903F49242223A14B105CDAAD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:49:74:63:65:2e:1d:fc:e6:78:11:c7:93:
                    b8:11:ae:19:aa:2b:72:84:79:69:08:62:fa:b8:ea:
                    6b:b2:7e:9c:a8:f1:6c:04:c6:4b:c0:d0:92:bc:29:
                    fb:bf:a2:ed:a0:a2:b0:ac:95:28:5f:dd:cc:51:b5:
                    d7:2a:8a:12:9e:82:47:f5:7f:c5:da:1d:3e:ad:42:
                    c8:d3:5d:1f:d0:07:1b:5a:56:11:af:a4:21:17:6d:
                    80:83:df:b5:5a:d4:da:c4:d8:13:5e:57:d7:06:c8:
                    00:38:df:c9:ef:fa:9d:f9:08:5a:41:75:1e:38:d3:
                    e0:6b:56:22:63:a8:13:23:9c:57:36:82:df:02:d8:
                    9c:9a:d5:32:1b:3e:58:7d:c2:df:07:63:8a:35:e2:
                    db:52:3f:8e:73:b8:a9:30:da:80:d1:53:78:d7:bf:
                    eb:f5:de:bd:5b:20:3b:81:72:2a:b0:64:58:c0:e6:
                    1e:20:df:5d:25:81:b4:89:89:5e:93:8c:bf:1a:c4:
                    5d:e6:7a:2d:9c:51:50:5b:bc:a1:31:27:c2:11:1f:
                    ea:6e:55:fc:dc:e7:00:a1:30:f1:44:8d:f8:2e:2d:
                    c4:f1:40:2c:f2:59:22:8c:a3:14:1b:c0:a0:54:55:
                    1b:3c:d1:88:bf:66:85:7e:bf:cf:2a:23:fc:3b:62:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:E4:D1:ED:1D:31:90:3F:49:24:22:23:A1:4B:10:5C:DA:AD:08
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:52:d4:08:c2:f4:46:59:8b:d0:ed:fc:27:45:83:b1:d6:91:
         0e:9c:16:a6:f2:1d:13:ea:3f:f3:1c:2f:e5:9c:0b:e8:d6:aa:
         e5:77:c3:88:48:b7:b7:9e:cf:3c:7e:29:26:68:c4:a6:90:04:
         d2:c5:dc:a8:5b:80:82:60:82:b9:33:b7:49:88:10:e7:d0:5a:
         11:dd:40:29:17:56:ba:32:90:0d:51:2c:cc:a6:bf:d6:ef:96:
         4a:a7:43:b4:03:e8:9e:b1:54:db:11:31:bc:33:2e:8e:c1:8e:
         76:d3:8f:31:9d:5d:aa:1f:3b:a4:fa:54:f3:9e:63:1c:16:82:
         19:1d:9a:7f:8b:13:39:c3:60:4f:98:26:2e:15:11:e8:05:6d:
         41:89:cc:73:b1:39:d9:e9:cc:38:ad:7c:74:7a:55:92:ca:b4:
         b7:f1:0a:99:d7:dd:e9:d6:88:72:53:04:51:fe:35:4a:01:c1:
         db:b7:d2:8f:6f:a7:bc:92:c7:11:71:54:ce:ed:79:9a:0c:be:
         b6:25:95:bd:85:80:56:c5:3f:7b:0a:00:0e:7f:75:08:71:59:
         c9:78:52:b7:16:d3:99:d1:2d:f4:49:4d:31:8a:76:d9:8f:c2:
         bd:bb:e6:05:19:f7:a0:bd:39:14:b5:28:e9:d0:23:36:a0:a7:
         2e:ee:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:24:02 2026 by rpki-client